npm/@web3-react/eip1193 CVE-2023-30543: medium 5.2, EPSS 0.38%
`chainId` may be outdated if user changes chains as part of connection in @web3-react
Action: Upgrade @web3-react/eip1193 to 8.0.27-beta or later.
npm i @web3-react/eip1193@8.0.27-betaAffected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 8.0.27-beta | - |
Fixed versions
| 8.0.27-beta |
Sources
- osv: GHSA-8pf3-6fgr-3g3g#npm/@web3-react/eip1193
- https://github.com/Uniswap/web3-react/security/advisories/GHSA-8pf3-6fgr-3g3g
- https://nvd.nist.gov/vuln/detail/CVE-2023-30543
- https://github.com/Uniswap/web3-react/pull/749
- https://github.com/Uniswap/web3-react
CVE-2023-30543 · published · modified · JSON